·
Last changedVersion:
This version passed the hardening gate. Hardening updated the skill content and independently checked the resulting changes. Classified findings before hardening: 5. Classified findings closed: 0. Classified findings remaining: 5. Unclassified scanner findings remaining: 0. Review findings closed: 2. Review findings remaining: 16.
1
4
1
4
Expand | File | Group | Subtype | Severity | Status |
|---|---|---|---|---|---|
SKILL.md | Sensitive Data & Secret Exposure | Data exfiltration | Medium | Open | |
SKILL.md | Malicious Code & Command Execution | — | Low | Open | |
SKILL.md | Sensitive Data & Secret Exposure | Hardcoded secret | Low | Open | |
SKILL.md | Prompt Injection | Third-party content as instructions | Low | Open | |
SKILL.md | Supply Chain & Install-Time Trust | Install-time download and execute | Low | Open |
5 findings
Add Apify Actor execution to an existing application. This skill covers the apify-client package for JS/TS and Python, plus the REST API for other languages.
The user needs an APIFY_TOKEN. Direct them to Console > Settings > Integrations at https://console.apify.com/settings/integrations to create one. If they don't have an account: https://console.apify.com/sign-up (free, no credit card).
Store the token securely — environment variable or secrets manager, never hardcoded.
Before writing integration code, find the Actor that fits the user's needs. Use the MCP tools if available:
search-actors — search the Apify Store by keywordfetch-actor-details — get the Actor's input schema, output format, and pricingAlternatively, browse https://apify.com/store.
.call() blocks until the Actor finishes. Use for short-running Actors (under a few minutes).
Use .start() + .waitForFinish() for long-running Actors or when you need the run ID immediately.
For languages without an official client, use the REST API directly.
Full API reference: https://docs.apify.com/api/v2
waitSecs on .call() to avoid indefinite waits.limit and offset when retrieving dataset items. Default limit is 250K items.ApifyClient instance and reuse it across calls.fetch-actor-details MCP tool to get the schema before constructing input.If the Apify MCP server is available, use search-apify-docs and fetch-apify-docs tools for contextual documentation lookups during development.
Get started with chainctlchainctl skill install public/apify/apify-sdk-integration:latest
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.cgr.dev/public/github.com/apify/skills/apify-sdk-integration:latest
Apache-2.0
HARDENING.md
SKILL.md